Senior Cloud Security Engineer - Automation & Compliance Lead

Jobgether; España; In loco; EUR 90.000 - 130.000; Tempo pieno

Descrizione del lavoro

Partner Company is seeking a Senior Security Engineer based in Spain to protect a real-time cloud-based platform. You will drive security automation, governance, and compliance initiatives across AWS, Kubernetes, Terraform, and GitHub environments.

Lead ISO 27001, SOC 2, and PCI DSS programs and automate evidence collection and access reviews. You will work on incident response, threat detection, and governance, shaping security strategy in a fast-growing international tech environment.

Competenze

• 5+ years of professional security engineering experience.
• Hands-on AWS security with IAM, CloudTrail, GuardDuty, Security Hub and WAF.
• Terraform, Kubernetes and GitHub Actions experience.
• Python or similar language for automation of evidence collection and reviews.
• Experience leading ISO 27001 or SOC 2 programmes and coordinating with auditors.

Mansioni

• Design automated evidence collection pipelines across AWS and CI/CD systems.
• Automate access reviews and strengthen identity governance.
• Develop Terraform and CI/CD security controls and baselines for cloud accounts and Kubernetes.
• Participate in on-call rotations and coordinate incident containment and remediation.
• Lead security certifications and manage audit relationships with external auditors.

Conoscenze

Security engineering

AWS security

IAM management

Incident response

Python scripting

Policy/compliance

Vulnerability management

Leadership in audits

Strumenti

Terraform

Kubernetes

GitHub Actions

CloudTrail/GuardDuty/Security Hub

PCI/DSS ISO SOC

Descrizione del lavoro

Partner Company is seeking a Senior Security Engineer based in Spain to protect a real-time cloud-based platform. You will drive security automation, governance, and compliance initiatives across AWS, Kubernetes, Terraform, and GitHub environments.

Lead ISO 27001, SOC 2, and PCI DSS programs and automate evidence collection and access reviews. You will work on incident response, threat detection, and governance, shaping security strategy in a fast-growing international tech environment.